IE (6千字)
.386.model flat,stdcall
option casemap:none
include \masm32\include\windows.inc
include \masm32\include\user32.inc
include \masm32\include\kernel32.inc
include \masm32\include\gdi32.inc
include \masm32\include\comctl32.inc
include \masm32\include\comdlg32.inc
include \masm32\include\shell32.inc
include \masm32\include\advapi32.inc
includelib \masm32\lib\user32.lib
includelib \masm32\lib\kernel32.lib
includelib \masm32\lib\gdi32.lib
includelib \masm32\lib\comctl32.lib
includelib \masm32\lib\comdlg32.lib
includelib \masm32\lib\shell32.lib
includelib \masm32\lib\advapi32.lib
.data
SubKey db 'Software\Policies\Microsoft\Internet Explorer',0
RegKey db "Control Panel",0
MsgCap db "Fix Your IE Ver 0.1 by WsCn",0
MsgOK db "Fixed OK!",0
MsgFailed db "Sorry, Fix failed Perhaps your IE is not been Locked！",0
lhHRootUser dd 0
hInstance dd 0
.code
start:
invoke GetModuleHandle,NULL
mov hInstance,eax
call ModifyIt
invoke ExitProcess,NULL
ModifyIt Proc
pushad
invoke RegOpenKeyEx,HKEY_CURRENT_USER,ADDR SubKey,NULL,KEY_ALL_ACCESS,ADDR lhHRootUser
.if !eax
invoke RegDeleteKey,lhHRootUser,ADDR RegKey
.if !eax
invoke MessageBox,NULL,addr MsgOK,addr MsgCap,MB_OK
jmp Modi_exit
.endif
.endif
invoke MessageBox,NULL,addr MsgFailed,addr MsgCap,MB_OK
Modi_exit:
invoke RegCloseKey,lhHRootUser
popad
ret
ModifyIt Endp
end start
编译好的代码(可以用WINHEX存为FixIE.exe)：
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
